discourse-acl-authoring

discourse-acl-authoring is an Auth & identity skill for AI agents, published by discourse in the discourse repository on GitHub. Skillspace rates discourse-acl-authoring C (71/100) and it passed the safety scan; a judge model has also reviewed it.

Use when creating, editing, or reviewing Discourse access-control-list features built on AccessControlList, AclTarget, Guardian ACL helpers, AccessControlListManager, mandatory_acl, banned_acl, Site access_control metadata, plugin ACL target registration, or the DAccessControl UI component.

Grade
C
Quality
71 / 100
Safety
Passed
GitHub stars
47,468

Placed #4 of 6 in the judged category final for Auth & identity.

Not launch-quality. It is graded C with a clean safety verdict, but our quality filters exclude it: a model that read it found it written only for the repository it lives in. So it is not in our launch-quality set, the skills our MCP server searches and recommends. How launch-quality is decided

This rating describes the version of the repository we crawled; it may have changed since, so go by its current files.

View source on GitHubdiscourse/discourse

Our review

Architecture
94 / 100
Maturity
Structured: ships references or scripts
Security scan
No issues found
License
GPL-2.0
Adoption
Adopted by 0 other repositories, in 0 collections
Scope
Repo-internal: written for the repository it lives in. Extends Discourse's own core Guardian/ACL authorization classes.

Judge review

Placed #4 of 6 in the judged category final for Auth & identity.

  • Trigger8282
  • Instructions8585
  • Specificity9090
  • Safety9292
  • Disclosure8888
  • Maintenance8282
Security-first ACL guide whose non-negotiables map onto real IDOR-prevention practice, refreshingly honest that user-level ACL wiring is incomplete rather than overselling the feature.

Not checked yet

  • No blind task eval yet
  • Sibling files (scripts, references) not fetched; security scan covers SKILL.md only

Better-rated skills in Auth & identity

Skillspace indexes and rates this skill; it does not host or endorse it. Run third-party skills at your own risk.